nerdexam
EC-Council

312-50V11 · Question #219

Which of the following is a passive wireless packet analyzer that works on Linux-based systems?

The correct answer is D. Kismet. Kismet is a passive 802.11 wireless network detector and packet sniffer designed for Linux that captures traffic without transmitting, making it undetectable on the wireless medium.

Hacking Wireless Networks

Question

Which of the following is a passive wireless packet analyzer that works on Linux-based systems?

Options

  • AOpenVAS
  • BBurp Suite
  • Ctshark
  • DKismet

How the community answered

(68 responses)
  • A
    3% (2)
  • B
    1% (1)
  • C
    1% (1)
  • D
    94% (64)

Why each option

Kismet is a passive 802.11 wireless network detector and packet sniffer designed for Linux that captures traffic without transmitting, making it undetectable on the wireless medium.

AOpenVAS

OpenVAS is an open-source network vulnerability scanner used to identify security weaknesses in hosts; it has no wireless packet capture or 802.11 monitoring functionality.

BBurp Suite

Burp Suite is a web application security testing proxy focused on HTTP/HTTPS traffic interception and manipulation; it cannot capture wireless 802.11 frames.

Ctshark

tshark is the command-line packet capture tool from the Wireshark suite and can capture traffic on wireless interfaces, but it is a general-purpose analyzer and not specifically a passive wireless detector designed around 802.11 reconnaissance.

DKismetCorrect

Kismet places wireless interfaces into monitor mode, allowing it to passively capture all 802.11 frames in range without injecting or transmitting any packets. It is purpose-built for Linux-based systems and supports passive detection of networks, clients, and encrypted traffic without alerting the target network.

Concept tested: Passive 802.11 wireless packet capture with Kismet

Source: https://www.kismetwireless.net/docs/readme/intro/

Topics

#Kismet#passive wireless scanning#wireless packet analysis#Linux tools

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice